YOOtheme Pro Joomla 5.0.42

• Fix escaping location custom field value (Joomla)
• Fix missing authorization check in module controller (Joomla)

Security​

• CVE-2026-75115: Fix arbitrary file read exploitable by any contributor-level user
• CVE-2026-76613: Fix SQL injection exploitable by any contributor-level user

Fixed

• Fix tabs style in frontend editing (Joomla)

• Fix language overrides in Newsletter element
• Fix custom fields not being filtered by language (Joomla)
• Fix do not show categories tab when in frontend customizer mode (Joomla)
• Fix missing form-login ID on the offline page login form (Joomla)

• Fix template assignments for product archive pages in WooCommerce 11 (WordPress)

• Fix update quantity in cart menu item (WordPress)
• Fix prevent generation of zero byte image cache files
• Fix whitespace in title elements

• Add option to set query type to WooCommerce Product Filter element (WordPress)

• Fix filter terms and pages by current admin language for Polylang plugin (WordPress)
• Fix menu active state in language switcher items (Joomla)
• Fix Google Analytics script loading with consent mode enabled

• Add support for responsive embedded content (WordPress)
• Add created date to Smart Search item source (Joomla)

• Fix Vimeo video lightbox link in Grid and Gallery elements

• Fix redirecting to the original image when image processing fails
• Fix filtered post content by stripping UIkit data attributes before KSES validation (WordPress)
• Fix WordPress editor overlay font in posts element

Fixed
Fix regression in WooCommerce integration (WordPress)

• Fix applying global custom field plugin settings to dynamic source configuration (Joomla)
• Fix WooCommerce variable product image handling with image middleware (WordPress)